Expel Quarterly Threat Report: Cybersecurity data, trends, and recs from Q1 2022

Expel’s Q1 2022 Quarterly Threat Report finds identity-based attacks comprised 65% of incidents (with BEC/BAC dominating), reports BEC in O365 as a major vector (57% of incidents), notes pre-ransomware activity and commodity malware deployment (macro-enabled Word and zipped JavaScript files common), documents MFA bypass techniques (malicious OAuth apps and push-fatigue attacks), and highlights operational outcomes including a 25-minute median alert-to-recommendation time for critical incidents.